1 matches found
User Impersonation
Overview @lobehub/cli is a LobeHub command-line interface. Affected versions of this package are vulnerable to User Impersonation via the X-lobe-chat-auth header on webapi routes. An attacker can gain unauthorized access to protected API endpoints and perform actions as an authenticated user by...
7.1CVSS5.8AI score0.00126EPSS
SaveExploits0References2
20